CVE-2024-7577 MEDIUM

CVE-2024-7577: IBM InfoSphere Information Server information disclosure

Vendor Ibm
Product InfoSphere Information Server
Weakness CWE-532 · Sensitive info in logs
Published March 28, 2025
Last update September 1, 2025
View on NVD All CVEs

CVSS base score

4.4/10
Attack vector Network
Attack complexity High
Privileges required High
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

IBM InfoSphere Information Server 11.7 could disclose sensitive user credentials from log files during new installation of the product.

Key dates

02Disclosure timeline

March 28, 2025 CVE published
September 1, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2023-6814 Information Exposure Vulnerability in Cosminexus Component Container CVE-2024-31249 WordPress Subscribe To Comments Reloaded plugin <= 220725 - Sensitive Data Exposure vulnerability CVE-2024-30514 WordPress Paid Memberships Pro – Payfast Gateway Add On plugin <= 1.4.1 - Sensitive Data Exposure via Log File vulnerability CVE-2023-46215 Apache Airflow Celery provider, Apache Airflow: Sensitive information logged as clear text when rediss, amqp, rpc protocols are used as Celery result backend CVE-2026-2607 Multiple vulnerabilities in IBM MQ Operator and Queue manager container images